//! Generated by `trust-tasks-codegen` — do not edit by hand.
//!
//! Spec slug: `credential-exchange/pending/list`. Version: `0.1`.
#[allow(unused_imports)]
use serde::{Deserialize, Serialize};
/// Error types.
pub mod error {
/// Error from a `TryFrom` or `FromStr` implementation.
pub struct ConversionError(::std::borrow::Cow<'static, str>);
impl ::std::error::Error for ConversionError {}
impl ::std::fmt::Display for ConversionError {
fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> Result<(), ::std::fmt::Error> {
::std::fmt::Display::fmt(&self.0, f)
}
}
impl ::std::fmt::Debug for ConversionError {
fn fmt(&self, f: &mut ::std::fmt::Formatter<'_>) -> Result<(), ::std::fmt::Error> {
::std::fmt::Debug::fmt(&self.0, f)
}
}
impl From<&'static str> for ConversionError {
fn from(value: &'static str) -> Self {
Self(value.into())
}
}
impl From<String> for ConversionError {
fn from(value: String) -> Self {
Self(value.into())
}
}
}
/**
One presentation request awaiting the holder's decision, as the approver sees it.
This is deliberately **not** the stored record. A consumer also retains the original DCQL query so an approval can re-present byte-faithfully against the verifier's original nonce; that is machinery, not a decision input, and is not exposed here. What is exposed is exactly what an approver needs to answer "should I disclose this": who is asking, why, and precisely which claims of which held credentials would leave the wallet.*/
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "DeferredPresentation",
/// "description": "\nOne presentation request awaiting the holder's decision, as the approver sees it.\n\nThis is deliberately **not** the stored record. A consumer also retains the original DCQL query so an approval can re-present byte-faithfully against the verifier's original nonce; that is machinery, not a decision input, and is not exposed here. What is exposed is exactly what an approver needs to answer \"should I disclose this\": who is asking, why, and precisely which claims of which held credentials would leave the wallet.",
/// "type": "object",
/// "required": [
/// "createdAt",
/// "expiresAt",
/// "id",
/// "purpose",
/// "requested",
/// "verifierDid"
/// ],
/// "properties": {
/// "createdAt": {
/// "description": "When the deferral was recorded.",
/// "type": "string",
/// "format": "date-time"
/// },
/// "expiresAt": {
/// "description": "After this the deferral is stale and approval MUST refuse — the verifier's nonce is no longer fresh, so any presentation minted against it would fail the verifier's own replay check.",
/// "type": "string",
/// "format": "date-time"
/// },
/// "id": {
/// "description": "Approval handle for this deferral — the value `pending/approve` and `pending/deny` act on.",
/// "type": "string",
/// "minLength": 1
/// },
/// "purpose": {
/// "description": "The verifier's stated reason, carried through from the query. Purpose binding: an approver decides against a stated why, never a bare request.",
/// "type": "string",
/// "maxLength": 500,
/// "minLength": 1
/// },
/// "requested": {
/// "description": "Every held credential the query would disclose, resolved against what the holder actually holds. This is the authorization surface: the approver is consenting to these claims leaving the wallet, not to the query in the abstract.",
/// "type": "array",
/// "items": {
/// "$ref": "#/definitions/RequestedCredential"
/// }
/// },
/// "verifierDid": {
/// "description": "The verifier that asked. An approved presentation binds to this audience, so approving is a decision about *this* party and not a standing permission.",
/// "type": "string",
/// "minLength": 1
/// }
/// },
/// "additionalProperties": false,
/// "$anchor": "deferredPresentation"
///}
/// ```
/// </details>
#[derive(::serde::Deserialize, ::serde::Serialize, Clone, Debug)]
#[serde(deny_unknown_fields)]
#[non_exhaustive]
pub struct DeferredPresentation {
///When the deferral was recorded.
#[serde(rename = "createdAt")]
pub created_at: ::chrono::DateTime<::chrono::offset::Utc>,
///After this the deferral is stale and approval MUST refuse — the verifier's nonce is no longer fresh, so any presentation minted against it would fail the verifier's own replay check.
#[serde(rename = "expiresAt")]
pub expires_at: ::chrono::DateTime<::chrono::offset::Utc>,
///Approval handle for this deferral — the value `pending/approve` and `pending/deny` act on.
pub id: DeferredPresentationId,
///The verifier's stated reason, carried through from the query. Purpose binding: an approver decides against a stated why, never a bare request.
pub purpose: DeferredPresentationPurpose,
///Every held credential the query would disclose, resolved against what the holder actually holds. This is the authorization surface: the approver is consenting to these claims leaving the wallet, not to the query in the abstract.
pub requested: ::std::vec::Vec<RequestedCredential>,
///The verifier that asked. An approved presentation binds to this audience, so approving is a decision about *this* party and not a standing permission.
#[serde(rename = "verifierDid")]
pub verifier_did: DeferredPresentationVerifierDid,
}
impl DeferredPresentation {
pub fn builder() -> builder::DeferredPresentation {
Default::default()
}
}
///Approval handle for this deferral — the value `pending/approve` and `pending/deny` act on.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "description": "Approval handle for this deferral — the value `pending/approve` and `pending/deny` act on.",
/// "type": "string",
/// "minLength": 1
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct DeferredPresentationId(::std::string::String);
impl ::std::ops::Deref for DeferredPresentationId {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<DeferredPresentationId> for ::std::string::String {
fn from(value: DeferredPresentationId) -> Self {
value.0
}
}
impl ::std::str::FromStr for DeferredPresentationId {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() < 1usize {
return Err("shorter than 1 characters".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for DeferredPresentationId {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for DeferredPresentationId {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for DeferredPresentationId {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for DeferredPresentationId {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///The verifier's stated reason, carried through from the query. Purpose binding: an approver decides against a stated why, never a bare request.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "description": "The verifier's stated reason, carried through from the query. Purpose binding: an approver decides against a stated why, never a bare request.",
/// "type": "string",
/// "maxLength": 500,
/// "minLength": 1
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct DeferredPresentationPurpose(::std::string::String);
impl ::std::ops::Deref for DeferredPresentationPurpose {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<DeferredPresentationPurpose> for ::std::string::String {
fn from(value: DeferredPresentationPurpose) -> Self {
value.0
}
}
impl ::std::str::FromStr for DeferredPresentationPurpose {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() > 500usize {
return Err("longer than 500 characters".into());
}
if value.chars().count() < 1usize {
return Err("shorter than 1 characters".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for DeferredPresentationPurpose {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for DeferredPresentationPurpose {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for DeferredPresentationPurpose {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for DeferredPresentationPurpose {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///The verifier that asked. An approved presentation binds to this audience, so approving is a decision about *this* party and not a standing permission.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "description": "The verifier that asked. An approved presentation binds to this audience, so approving is a decision about *this* party and not a standing permission.",
/// "type": "string",
/// "minLength": 1
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct DeferredPresentationVerifierDid(::std::string::String);
impl ::std::ops::Deref for DeferredPresentationVerifierDid {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<DeferredPresentationVerifierDid> for ::std::string::String {
fn from(value: DeferredPresentationVerifierDid) -> Self {
value.0
}
}
impl ::std::str::FromStr for DeferredPresentationVerifierDid {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() < 1usize {
return Err("shorter than 1 characters".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for DeferredPresentationVerifierDid {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for DeferredPresentationVerifierDid {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for DeferredPresentationVerifierDid {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for DeferredPresentationVerifierDid {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "Ext",
/// "description": "Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.",
/// "type": "object",
/// "minProperties": 1,
/// "additionalProperties": true,
/// "propertyNames": {
/// "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
/// }
///}
/// ```
/// </details>
#[derive(::serde::Deserialize, ::serde::Serialize, Clone, Debug)]
#[serde(transparent)]
pub struct Ext(pub ::std::collections::HashMap<ExtKey, ::serde_json::Value>);
impl ::std::ops::Deref for Ext {
type Target = ::std::collections::HashMap<ExtKey, ::serde_json::Value>;
fn deref(&self) -> &::std::collections::HashMap<ExtKey, ::serde_json::Value> {
&self.0
}
}
impl ::std::convert::From<Ext> for ::std::collections::HashMap<ExtKey, ::serde_json::Value> {
fn from(value: Ext) -> Self {
value.0
}
}
impl ::std::convert::From<::std::collections::HashMap<ExtKey, ::serde_json::Value>> for Ext {
fn from(value: ::std::collections::HashMap<ExtKey, ::serde_json::Value>) -> Self {
Self(value)
}
}
///`ExtKey`
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "type": "string",
/// "pattern": "^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$"
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct ExtKey(::std::string::String);
impl ::std::ops::Deref for ExtKey {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<ExtKey> for ::std::string::String {
fn from(value: ExtKey) -> Self {
value.0
}
}
impl ::std::str::FromStr for ExtKey {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
static PATTERN: ::std::sync::LazyLock<::regress::Regex> =
::std::sync::LazyLock::new(|| {
::regress::Regex::new("^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$").unwrap()
});
if PATTERN.find(value).is_none() {
return Err("doesn't match pattern \"^[a-z][a-z0-9-]*(\\.[a-z0-9-]+)+$\"".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for ExtKey {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for ExtKey {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for ExtKey {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for ExtKey {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///List the presentation requests this holder deferred for consent and that can still be acted on. Takes no parameters: the caller's authenticated identity is the scope, and a holder agent answers only for its own wallet.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "$id": "https://trusttasks.org/spec/credential-exchange/pending/list/0.1",
/// "title": "Payload",
/// "description": "List the presentation requests this holder deferred for consent and that can still be acted on. Takes no parameters: the caller's authenticated identity is the scope, and a holder agent answers only for its own wallet.",
/// "type": "object",
/// "properties": {
/// "ext": {
/// "$ref": "#/definitions/Ext"
/// }
/// },
/// "additionalProperties": false
///}
/// ```
/// </details>
#[derive(::serde::Deserialize, ::serde::Serialize, Clone, Debug)]
#[serde(deny_unknown_fields)]
#[non_exhaustive]
pub struct Payload {
#[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
pub ext: ::std::option::Option<Ext>,
}
impl ::std::default::Default for Payload {
fn default() -> Self {
Self {
ext: Default::default(),
}
}
}
impl Payload {
pub fn builder() -> builder::Payload {
Default::default()
}
}
///One held credential a deferred query asked for, and the claims of it that would be disclosed.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "RequestedCredential",
/// "description": "One held credential a deferred query asked for, and the claims of it that would be disclosed.",
/// "type": "object",
/// "required": [
/// "claims",
/// "credentialId",
/// "credentialQueryId"
/// ],
/// "properties": {
/// "claims": {
/// "description": "The claims the query asks to disclose from this credential. An empty array means the query matched the credential without naming claims — a consumer SHOULD treat that as a request for the whole credential and present it to the approver as such.",
/// "type": "array",
/// "items": {
/// "type": "string",
/// "minLength": 1
/// }
/// },
/// "credentialId": {
/// "description": "The held credential that would satisfy it.",
/// "type": "string",
/// "minLength": 1
/// },
/// "credentialQueryId": {
/// "description": "The DCQL `credential_query_id` this held credential satisfied.",
/// "type": "string",
/// "minLength": 1
/// }
/// },
/// "additionalProperties": false,
/// "$anchor": "requestedCredential"
///}
/// ```
/// </details>
#[derive(::serde::Deserialize, ::serde::Serialize, Clone, Debug)]
#[serde(deny_unknown_fields)]
#[non_exhaustive]
pub struct RequestedCredential {
///The claims the query asks to disclose from this credential. An empty array means the query matched the credential without naming claims — a consumer SHOULD treat that as a request for the whole credential and present it to the approver as such.
pub claims: ::std::vec::Vec<RequestedCredentialClaimsItem>,
///The held credential that would satisfy it.
#[serde(rename = "credentialId")]
pub credential_id: RequestedCredentialCredentialId,
///The DCQL `credential_query_id` this held credential satisfied.
#[serde(rename = "credentialQueryId")]
pub credential_query_id: RequestedCredentialCredentialQueryId,
}
impl RequestedCredential {
pub fn builder() -> builder::RequestedCredential {
Default::default()
}
}
///`RequestedCredentialClaimsItem`
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "type": "string",
/// "minLength": 1
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct RequestedCredentialClaimsItem(::std::string::String);
impl ::std::ops::Deref for RequestedCredentialClaimsItem {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<RequestedCredentialClaimsItem> for ::std::string::String {
fn from(value: RequestedCredentialClaimsItem) -> Self {
value.0
}
}
impl ::std::str::FromStr for RequestedCredentialClaimsItem {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() < 1usize {
return Err("shorter than 1 characters".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for RequestedCredentialClaimsItem {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for RequestedCredentialClaimsItem {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for RequestedCredentialClaimsItem {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for RequestedCredentialClaimsItem {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///The held credential that would satisfy it.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "description": "The held credential that would satisfy it.",
/// "type": "string",
/// "minLength": 1
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct RequestedCredentialCredentialId(::std::string::String);
impl ::std::ops::Deref for RequestedCredentialCredentialId {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<RequestedCredentialCredentialId> for ::std::string::String {
fn from(value: RequestedCredentialCredentialId) -> Self {
value.0
}
}
impl ::std::str::FromStr for RequestedCredentialCredentialId {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() < 1usize {
return Err("shorter than 1 characters".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for RequestedCredentialCredentialId {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for RequestedCredentialCredentialId {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for RequestedCredentialCredentialId {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for RequestedCredentialCredentialId {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///The DCQL `credential_query_id` this held credential satisfied.
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "description": "The DCQL `credential_query_id` this held credential satisfied.",
/// "type": "string",
/// "minLength": 1
///}
/// ```
/// </details>
#[derive(::serde::Serialize, Clone, Debug, Eq, Hash, Ord, PartialEq, PartialOrd)]
#[serde(transparent)]
pub struct RequestedCredentialCredentialQueryId(::std::string::String);
impl ::std::ops::Deref for RequestedCredentialCredentialQueryId {
type Target = ::std::string::String;
fn deref(&self) -> &::std::string::String {
&self.0
}
}
impl ::std::convert::From<RequestedCredentialCredentialQueryId> for ::std::string::String {
fn from(value: RequestedCredentialCredentialQueryId) -> Self {
value.0
}
}
impl ::std::str::FromStr for RequestedCredentialCredentialQueryId {
type Err = self::error::ConversionError;
fn from_str(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
if value.chars().count() < 1usize {
return Err("shorter than 1 characters".into());
}
Ok(Self(value.to_string()))
}
}
impl ::std::convert::TryFrom<&str> for RequestedCredentialCredentialQueryId {
type Error = self::error::ConversionError;
fn try_from(value: &str) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<&::std::string::String> for RequestedCredentialCredentialQueryId {
type Error = self::error::ConversionError;
fn try_from(
value: &::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl ::std::convert::TryFrom<::std::string::String> for RequestedCredentialCredentialQueryId {
type Error = self::error::ConversionError;
fn try_from(
value: ::std::string::String,
) -> ::std::result::Result<Self, self::error::ConversionError> {
value.parse()
}
}
impl<'de> ::serde::Deserialize<'de> for RequestedCredentialCredentialQueryId {
fn deserialize<D>(deserializer: D) -> ::std::result::Result<Self, D::Error>
where
D: ::serde::Deserializer<'de>,
{
::std::string::String::deserialize(deserializer)?
.parse()
.map_err(|e: self::error::ConversionError| {
<D::Error as ::serde::de::Error>::custom(e.to_string())
})
}
}
///`Response`
///
/// <details><summary>JSON schema</summary>
///
/// ```json
///{
/// "title": "Response",
/// "type": "object",
/// "required": [
/// "pending"
/// ],
/// "properties": {
/// "ext": {
/// "$ref": "#/definitions/Ext"
/// },
/// "pending": {
/// "description": "The actionable deferrals. A consumer MUST omit records that are already terminal or past their `expiresAt` — they cannot be approved, so listing them would offer the approver a decision that is guaranteed to fail. An empty array means nothing is awaiting a decision.",
/// "type": "array",
/// "items": {
/// "$ref": "#/definitions/DeferredPresentation"
/// }
/// }
/// },
/// "additionalProperties": false,
/// "$anchor": "response"
///}
/// ```
/// </details>
#[derive(::serde::Deserialize, ::serde::Serialize, Clone, Debug)]
#[serde(deny_unknown_fields)]
#[non_exhaustive]
pub struct Response {
#[serde(default, skip_serializing_if = "::std::option::Option::is_none")]
pub ext: ::std::option::Option<Ext>,
///The actionable deferrals. A consumer MUST omit records that are already terminal or past their `expiresAt` — they cannot be approved, so listing them would offer the approver a decision that is guaranteed to fail. An empty array means nothing is awaiting a decision.
pub pending: ::std::vec::Vec<DeferredPresentation>,
}
impl Response {
pub fn builder() -> builder::Response {
Default::default()
}
}
/// Types for composing complex structures.
pub mod builder {
#[derive(Clone, Debug)]
pub struct DeferredPresentation {
created_at:
::std::result::Result<::chrono::DateTime<::chrono::offset::Utc>, ::std::string::String>,
expires_at:
::std::result::Result<::chrono::DateTime<::chrono::offset::Utc>, ::std::string::String>,
id: ::std::result::Result<super::DeferredPresentationId, ::std::string::String>,
purpose: ::std::result::Result<super::DeferredPresentationPurpose, ::std::string::String>,
requested: ::std::result::Result<
::std::vec::Vec<super::RequestedCredential>,
::std::string::String,
>,
verifier_did:
::std::result::Result<super::DeferredPresentationVerifierDid, ::std::string::String>,
}
impl ::std::default::Default for DeferredPresentation {
fn default() -> Self {
Self {
created_at: Err("no value supplied for created_at".to_string()),
expires_at: Err("no value supplied for expires_at".to_string()),
id: Err("no value supplied for id".to_string()),
purpose: Err("no value supplied for purpose".to_string()),
requested: Err("no value supplied for requested".to_string()),
verifier_did: Err("no value supplied for verifier_did".to_string()),
}
}
}
impl DeferredPresentation {
pub fn created_at<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::chrono::DateTime<::chrono::offset::Utc>>,
T::Error: ::std::fmt::Display,
{
self.created_at = value
.try_into()
.map_err(|e| format!("error converting supplied value for created_at: {e}"));
self
}
pub fn expires_at<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::chrono::DateTime<::chrono::offset::Utc>>,
T::Error: ::std::fmt::Display,
{
self.expires_at = value
.try_into()
.map_err(|e| format!("error converting supplied value for expires_at: {e}"));
self
}
pub fn id<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::DeferredPresentationId>,
T::Error: ::std::fmt::Display,
{
self.id = value
.try_into()
.map_err(|e| format!("error converting supplied value for id: {e}"));
self
}
pub fn purpose<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::DeferredPresentationPurpose>,
T::Error: ::std::fmt::Display,
{
self.purpose = value
.try_into()
.map_err(|e| format!("error converting supplied value for purpose: {e}"));
self
}
pub fn requested<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::vec::Vec<super::RequestedCredential>>,
T::Error: ::std::fmt::Display,
{
self.requested = value
.try_into()
.map_err(|e| format!("error converting supplied value for requested: {e}"));
self
}
pub fn verifier_did<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::DeferredPresentationVerifierDid>,
T::Error: ::std::fmt::Display,
{
self.verifier_did = value
.try_into()
.map_err(|e| format!("error converting supplied value for verifier_did: {e}"));
self
}
}
impl ::std::convert::TryFrom<DeferredPresentation> for super::DeferredPresentation {
type Error = super::error::ConversionError;
fn try_from(
value: DeferredPresentation,
) -> ::std::result::Result<Self, super::error::ConversionError> {
Ok(Self {
created_at: value.created_at?,
expires_at: value.expires_at?,
id: value.id?,
purpose: value.purpose?,
requested: value.requested?,
verifier_did: value.verifier_did?,
})
}
}
impl ::std::convert::From<super::DeferredPresentation> for DeferredPresentation {
fn from(value: super::DeferredPresentation) -> Self {
Self {
created_at: Ok(value.created_at),
expires_at: Ok(value.expires_at),
id: Ok(value.id),
purpose: Ok(value.purpose),
requested: Ok(value.requested),
verifier_did: Ok(value.verifier_did),
}
}
}
#[derive(Clone, Debug)]
pub struct Payload {
ext: ::std::result::Result<::std::option::Option<super::Ext>, ::std::string::String>,
}
impl ::std::default::Default for Payload {
fn default() -> Self {
Self {
ext: Ok(Default::default()),
}
}
}
impl Payload {
pub fn ext<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::option::Option<super::Ext>>,
T::Error: ::std::fmt::Display,
{
self.ext = value
.try_into()
.map_err(|e| format!("error converting supplied value for ext: {e}"));
self
}
}
impl ::std::convert::TryFrom<Payload> for super::Payload {
type Error = super::error::ConversionError;
fn try_from(value: Payload) -> ::std::result::Result<Self, super::error::ConversionError> {
Ok(Self { ext: value.ext? })
}
}
impl ::std::convert::From<super::Payload> for Payload {
fn from(value: super::Payload) -> Self {
Self { ext: Ok(value.ext) }
}
}
#[derive(Clone, Debug)]
pub struct RequestedCredential {
claims: ::std::result::Result<
::std::vec::Vec<super::RequestedCredentialClaimsItem>,
::std::string::String,
>,
credential_id:
::std::result::Result<super::RequestedCredentialCredentialId, ::std::string::String>,
credential_query_id: ::std::result::Result<
super::RequestedCredentialCredentialQueryId,
::std::string::String,
>,
}
impl ::std::default::Default for RequestedCredential {
fn default() -> Self {
Self {
claims: Err("no value supplied for claims".to_string()),
credential_id: Err("no value supplied for credential_id".to_string()),
credential_query_id: Err("no value supplied for credential_query_id".to_string()),
}
}
}
impl RequestedCredential {
pub fn claims<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::vec::Vec<super::RequestedCredentialClaimsItem>>,
T::Error: ::std::fmt::Display,
{
self.claims = value
.try_into()
.map_err(|e| format!("error converting supplied value for claims: {e}"));
self
}
pub fn credential_id<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::RequestedCredentialCredentialId>,
T::Error: ::std::fmt::Display,
{
self.credential_id = value
.try_into()
.map_err(|e| format!("error converting supplied value for credential_id: {e}"));
self
}
pub fn credential_query_id<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<super::RequestedCredentialCredentialQueryId>,
T::Error: ::std::fmt::Display,
{
self.credential_query_id = value.try_into().map_err(|e| {
format!("error converting supplied value for credential_query_id: {e}")
});
self
}
}
impl ::std::convert::TryFrom<RequestedCredential> for super::RequestedCredential {
type Error = super::error::ConversionError;
fn try_from(
value: RequestedCredential,
) -> ::std::result::Result<Self, super::error::ConversionError> {
Ok(Self {
claims: value.claims?,
credential_id: value.credential_id?,
credential_query_id: value.credential_query_id?,
})
}
}
impl ::std::convert::From<super::RequestedCredential> for RequestedCredential {
fn from(value: super::RequestedCredential) -> Self {
Self {
claims: Ok(value.claims),
credential_id: Ok(value.credential_id),
credential_query_id: Ok(value.credential_query_id),
}
}
}
#[derive(Clone, Debug)]
pub struct Response {
ext: ::std::result::Result<::std::option::Option<super::Ext>, ::std::string::String>,
pending: ::std::result::Result<
::std::vec::Vec<super::DeferredPresentation>,
::std::string::String,
>,
}
impl ::std::default::Default for Response {
fn default() -> Self {
Self {
ext: Ok(Default::default()),
pending: Err("no value supplied for pending".to_string()),
}
}
}
impl Response {
pub fn ext<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::option::Option<super::Ext>>,
T::Error: ::std::fmt::Display,
{
self.ext = value
.try_into()
.map_err(|e| format!("error converting supplied value for ext: {e}"));
self
}
pub fn pending<T>(mut self, value: T) -> Self
where
T: ::std::convert::TryInto<::std::vec::Vec<super::DeferredPresentation>>,
T::Error: ::std::fmt::Display,
{
self.pending = value
.try_into()
.map_err(|e| format!("error converting supplied value for pending: {e}"));
self
}
}
impl ::std::convert::TryFrom<Response> for super::Response {
type Error = super::error::ConversionError;
fn try_from(value: Response) -> ::std::result::Result<Self, super::error::ConversionError> {
Ok(Self {
ext: value.ext?,
pending: value.pending?,
})
}
}
impl ::std::convert::From<super::Response> for Response {
fn from(value: super::Response) -> Self {
Self {
ext: Ok(value.ext),
pending: Ok(value.pending),
}
}
}
}
impl crate::Payload for Payload {
const TYPE_URI: &'static str =
"https://trusttasks.org/spec/credential-exchange/pending/list/0.1";
const IS_PROOF_REQUIRED: bool = true;
const IS_ISSUED_AT_REQUIRED: bool = true;
const IS_RECIPIENT_REQUIRED: bool = true;
const PAYLOAD_SCHEMA: Option<&'static str> = Some(
"{\n \"$defs\": {\n \"DeferredPresentation\": {\n \"$anchor\": \"deferredPresentation\",\n \"additionalProperties\": false,\n \"description\": \"One presentation request awaiting the holder's decision, as the approver sees it.\\n\\nThis is deliberately **not** the stored record. A consumer also retains the original DCQL query so an approval can re-present byte-faithfully against the verifier's original nonce; that is machinery, not a decision input, and is not exposed here. What is exposed is exactly what an approver needs to answer \\\"should I disclose this\\\": who is asking, why, and precisely which claims of which held credentials would leave the wallet.\",\n \"properties\": {\n \"createdAt\": {\n \"description\": \"When the deferral was recorded.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"expiresAt\": {\n \"description\": \"After this the deferral is stale and approval MUST refuse — the verifier's nonce is no longer fresh, so any presentation minted against it would fail the verifier's own replay check.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"id\": {\n \"description\": \"Approval handle for this deferral — the value `pending/approve` and `pending/deny` act on.\",\n \"minLength\": 1,\n \"type\": \"string\"\n },\n \"purpose\": {\n \"description\": \"The verifier's stated reason, carried through from the query. Purpose binding: an approver decides against a stated why, never a bare request.\",\n \"maxLength\": 500,\n \"minLength\": 1,\n \"type\": \"string\"\n },\n \"requested\": {\n \"description\": \"Every held credential the query would disclose, resolved against what the holder actually holds. This is the authorization surface: the approver is consenting to these claims leaving the wallet, not to the query in the abstract.\",\n \"items\": {\n \"$ref\": \"#/$defs/RequestedCredential\"\n },\n \"type\": \"array\"\n },\n \"verifierDid\": {\n \"description\": \"The verifier that asked. An approved presentation binds to this audience, so approving is a decision about *this* party and not a standing permission.\",\n \"minLength\": 1,\n \"type\": \"string\"\n }\n },\n \"required\": [\n \"id\",\n \"verifierDid\",\n \"requested\",\n \"purpose\",\n \"createdAt\",\n \"expiresAt\"\n ],\n \"title\": \"DeferredPresentation\",\n \"type\": \"object\"\n },\n \"Ext\": {\n \"additionalProperties\": true,\n \"description\": \"Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.\",\n \"minProperties\": 1,\n \"propertyNames\": {\n \"pattern\": \"^[a-z][a-z0-9-]*(\\\\.[a-z0-9-]+)+$\"\n },\n \"title\": \"Ext\",\n \"type\": \"object\"\n },\n \"RequestedCredential\": {\n \"$anchor\": \"requestedCredential\",\n \"additionalProperties\": false,\n \"description\": \"One held credential a deferred query asked for, and the claims of it that would be disclosed.\",\n \"properties\": {\n \"claims\": {\n \"description\": \"The claims the query asks to disclose from this credential. An empty array means the query matched the credential without naming claims — a consumer SHOULD treat that as a request for the whole credential and present it to the approver as such.\",\n \"items\": {\n \"minLength\": 1,\n \"type\": \"string\"\n },\n \"type\": \"array\"\n },\n \"credentialId\": {\n \"description\": \"The held credential that would satisfy it.\",\n \"minLength\": 1,\n \"type\": \"string\"\n },\n \"credentialQueryId\": {\n \"description\": \"The DCQL `credential_query_id` this held credential satisfied.\",\n \"minLength\": 1,\n \"type\": \"string\"\n }\n },\n \"required\": [\n \"credentialQueryId\",\n \"credentialId\",\n \"claims\"\n ],\n \"title\": \"RequestedCredential\",\n \"type\": \"object\"\n },\n \"Response\": {\n \"$anchor\": \"response\",\n \"additionalProperties\": false,\n \"properties\": {\n \"ext\": {\n \"$ref\": \"#/$defs/Ext\"\n },\n \"pending\": {\n \"description\": \"The actionable deferrals. A consumer MUST omit records that are already terminal or past their `expiresAt` — they cannot be approved, so listing them would offer the approver a decision that is guaranteed to fail. An empty array means nothing is awaiting a decision.\",\n \"items\": {\n \"$ref\": \"#/$defs/DeferredPresentation\"\n },\n \"type\": \"array\"\n }\n },\n \"required\": [\n \"pending\"\n ],\n \"title\": \"Credential Exchange Pending List — response payload\",\n \"type\": \"object\"\n }\n },\n \"$id\": \"https://trusttasks.org/spec/credential-exchange/pending/list/0.1\",\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\",\n \"additionalProperties\": false,\n \"description\": \"List the presentation requests this holder deferred for consent and that can still be acted on. Takes no parameters: the caller's authenticated identity is the scope, and a holder agent answers only for its own wallet.\",\n \"properties\": {\n \"ext\": {\n \"$ref\": \"#/$defs/Ext\"\n }\n },\n \"title\": \"Credential Exchange Pending List — payload\",\n \"type\": \"object\"\n}\n",
);
}
impl crate::Payload for Response {
const TYPE_URI: &'static str =
"https://trusttasks.org/spec/credential-exchange/pending/list/0.1#response";
const IS_PROOF_REQUIRED: bool = true;
const IS_ISSUED_AT_REQUIRED: bool = true;
const IS_RECIPIENT_REQUIRED: bool = true;
const PAYLOAD_SCHEMA: Option<&'static str> = Some(
"{\n \"$defs\": {\n \"DeferredPresentation\": {\n \"$anchor\": \"deferredPresentation\",\n \"additionalProperties\": false,\n \"description\": \"One presentation request awaiting the holder's decision, as the approver sees it.\\n\\nThis is deliberately **not** the stored record. A consumer also retains the original DCQL query so an approval can re-present byte-faithfully against the verifier's original nonce; that is machinery, not a decision input, and is not exposed here. What is exposed is exactly what an approver needs to answer \\\"should I disclose this\\\": who is asking, why, and precisely which claims of which held credentials would leave the wallet.\",\n \"properties\": {\n \"createdAt\": {\n \"description\": \"When the deferral was recorded.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"expiresAt\": {\n \"description\": \"After this the deferral is stale and approval MUST refuse — the verifier's nonce is no longer fresh, so any presentation minted against it would fail the verifier's own replay check.\",\n \"format\": \"date-time\",\n \"type\": \"string\"\n },\n \"id\": {\n \"description\": \"Approval handle for this deferral — the value `pending/approve` and `pending/deny` act on.\",\n \"minLength\": 1,\n \"type\": \"string\"\n },\n \"purpose\": {\n \"description\": \"The verifier's stated reason, carried through from the query. Purpose binding: an approver decides against a stated why, never a bare request.\",\n \"maxLength\": 500,\n \"minLength\": 1,\n \"type\": \"string\"\n },\n \"requested\": {\n \"description\": \"Every held credential the query would disclose, resolved against what the holder actually holds. This is the authorization surface: the approver is consenting to these claims leaving the wallet, not to the query in the abstract.\",\n \"items\": {\n \"$ref\": \"#/$defs/RequestedCredential\"\n },\n \"type\": \"array\"\n },\n \"verifierDid\": {\n \"description\": \"The verifier that asked. An approved presentation binds to this audience, so approving is a decision about *this* party and not a standing permission.\",\n \"minLength\": 1,\n \"type\": \"string\"\n }\n },\n \"required\": [\n \"id\",\n \"verifierDid\",\n \"requested\",\n \"purpose\",\n \"createdAt\",\n \"expiresAt\"\n ],\n \"title\": \"DeferredPresentation\",\n \"type\": \"object\"\n },\n \"Ext\": {\n \"additionalProperties\": true,\n \"description\": \"Vendor-namespaced extension object per SPEC.md §4.5.1. Each immediate key MUST be a reverse-DNS namespace; structure under each namespace is opaque to the framework.\",\n \"minProperties\": 1,\n \"propertyNames\": {\n \"pattern\": \"^[a-z][a-z0-9-]*(\\\\.[a-z0-9-]+)+$\"\n },\n \"title\": \"Ext\",\n \"type\": \"object\"\n },\n \"RequestedCredential\": {\n \"$anchor\": \"requestedCredential\",\n \"additionalProperties\": false,\n \"description\": \"One held credential a deferred query asked for, and the claims of it that would be disclosed.\",\n \"properties\": {\n \"claims\": {\n \"description\": \"The claims the query asks to disclose from this credential. An empty array means the query matched the credential without naming claims — a consumer SHOULD treat that as a request for the whole credential and present it to the approver as such.\",\n \"items\": {\n \"minLength\": 1,\n \"type\": \"string\"\n },\n \"type\": \"array\"\n },\n \"credentialId\": {\n \"description\": \"The held credential that would satisfy it.\",\n \"minLength\": 1,\n \"type\": \"string\"\n },\n \"credentialQueryId\": {\n \"description\": \"The DCQL `credential_query_id` this held credential satisfied.\",\n \"minLength\": 1,\n \"type\": \"string\"\n }\n },\n \"required\": [\n \"credentialQueryId\",\n \"credentialId\",\n \"claims\"\n ],\n \"title\": \"RequestedCredential\",\n \"type\": \"object\"\n },\n \"Response\": {\n \"$anchor\": \"response\",\n \"additionalProperties\": false,\n \"properties\": {\n \"ext\": {\n \"$ref\": \"#/$defs/Ext\"\n },\n \"pending\": {\n \"description\": \"The actionable deferrals. A consumer MUST omit records that are already terminal or past their `expiresAt` — they cannot be approved, so listing them would offer the approver a decision that is guaranteed to fail. An empty array means nothing is awaiting a decision.\",\n \"items\": {\n \"$ref\": \"#/$defs/DeferredPresentation\"\n },\n \"type\": \"array\"\n }\n },\n \"required\": [\n \"pending\"\n ],\n \"title\": \"Credential Exchange Pending List — response payload\",\n \"type\": \"object\"\n }\n },\n \"$ref\": \"#/$defs/Response\",\n \"$schema\": \"https://json-schema.org/draft/2020-12/schema\"\n}\n",
);
}
impl crate::RequestPayload for Payload {
type Response = Response;
}
/// The extended error codes this specification declares (SPEC §7.3 item 9,
/// §8.5), in declaration order. Empty when it declares none.
pub const ERROR_CODES: &[crate::DeclaredErrorCode] = &[];
#[cfg(test)]
mod conformance {
//! Round-trip tests harvested from the spec's `spec.md`,
//! plus a `rejects_invalid_examples` test for any fixtures
//! in `payload.invalid-examples.json` (validate feature).
/// Each fixture in `payload.invalid-examples.json` MUST be
/// rejected by at least one of: serde deserialization, or
/// JSON-Schema validation under the `validate` feature. The
/// fixture file documents the producer-side bug class that
/// each payload exemplifies; this generated test pins it.
#[cfg(feature = "validate")]
#[test]
fn rejects_invalid_examples() {
use crate::validate::ValidatedPayload;
let fixtures: &[(&str, &str)] = &[
(
"The request takes no parameters; a stray filter is rejected.",
"{\n \"status\": \"pending\"\n}",
),
(
"Unknown top-level member is rejected (additionalProperties: false).",
"{\n \"__notARealMember__\": true\n}",
),
(
"`ext` keys must be reverse-DNS namespaces.",
"{\n \"ext\": {\n \"vendor\": {\n \"a\": 1\n }\n }\n}",
),
];
for (i, (note, raw)) in fixtures.iter().enumerate() {
let value: serde_json::Value = match serde_json::from_str(raw) {
Ok(v) => v,
Err(_) => continue,
};
let serde_ok = serde_json::from_value::<super::Payload>(value.clone()).is_ok();
let schema_ok = super::Payload::validate_value(&value).is_ok();
assert!(
!(serde_ok && schema_ok),
"invalid-example #{} ({:?}) was accepted by both serde and JSON Schema; \
the fixture's stated failure class is no longer caught:\n{}",
i + 1,
note,
raw
);
}
}
}